* tab browsing
* customizable mouse operations
* two-stroke keybinding
* undo for cursor moves
* background downloading
* data: URL support
* news:, nntp: newsgroup support
* folding lines for plain text
* listing of links
* setting default values for forms by pre_form
Also fix mimetypes typo; from J.A. Neitzel <jneitzel@bluemarble.net>.
"Hironori SAKAMOTO <hsaka@mth.biglobe.ne.jp> found another security
vulnerability in w3m 0.3.2.x that w3m will miss to escape html tag
in img alt attribute, so malicious frame html may deceive you to
access your local files, cookies and so on."
SECURITY: This fixes a vulnerability where w3m fails to escape HTML
tags in frame contents, so malicious frame HTML can deceive you and
access your local files, cookies and so on.
Hironori Sakamoto found some vulnerabilities in w3m support scripts,
such as multipart.cgi, w3mman2html.cgi and w3mhelp.cgi. Attacker
could run arbitrary commands on user's machine with user's privilege
by using malicious html pages.
Radical pruning to make this port manageable again:
- Remove image and m17n flavors. The corresponding functionality
may eventually return in some other form.
- Rename kanji flavor to "japanese".